samba.git/source4/setup, branch talloc-2.1.2

s4-dsdb: Define internal dsdb control to mark Tombstone reanimation requests

2015-02-03T04:02:11+00:00

Tombstone reanimation requries some special handling which is going
to affect several modules. Most notably:
 - a bit different access checks in acl.c
 - restore certain attributes during modify requests in samldb.c

Control added also to schema_samba4.ldif by Andrew Bartlett
hence the "pair programmed with" tag.

Change-Id: Ief4f7dabbbdc2570924fae48c30ac9c531a701f4
Pair-programmed-with: Andrew Bartlett 
Signed-off-by: Kamen Mazdrashki 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam

CVE-2014-8143:dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl

2015-01-15T13:54:47+00:00

This requires an additional control to be used in the
LSA server to add domain trust account objects.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Karolin Seeger 
Autobuild-Date(master): Thu Jan 15 14:54:47 CET 2015 on sn-devel-104

s4-dns: Add support for BIND 9.10

2014-10-25T03:42:19+00:00

Signed-off-by: Amitay Isaacs 
Reviewed-by: Matthieu Patou 

Autobuild-User(master): Amitay Isaacs 
Autobuild-Date(master): Sat Oct 25 05:42:19 CEST 2014 on sn-devel-104

s4-dns: Update template variables, change BIND98 --> BIND9_8

2014-10-25T01:21:04+00:00

This makes it easier to add suport for BIND 9.10.

Signed-off-by: Amitay Isaacs 
Reviewed-by: Matthieu Patou

selftest: Fix test samba4.blackbox.group.py

2014-10-23T13:56:04+00:00

The test created two users and in later steps it tried adding two
non-existend users to groups. This fix adds now the two created
accounts to the groups instead.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10871

Signed-off-by: Marc Muehlfeld 
Reviewed-by: Michael Adam

s4:setup/dns_update_list: make use of the new substitution variables

2014-08-26T09:38:54+00:00

This let us register the same names as Windows Servers.

We only exception are the NS records. In future we could add them
by using something like this:

  samba-tool dns add ${HOSTNAME} ${DNSDOMAIN} @ NS ${HOSTNAME}
  samba-tool dns add ${HOSTNAME} _msdcs.${DNSFOREST} @ NS ${HOSTNAME}
  samba-tool dns add ${HOSTNAME} ${DNSFOREST} _msdcs NS ${HOSTNAME}

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9831

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Tue Aug 26 11:38:54 CEST 2014 on sn-devel-104

selftest: make blackbox_setpassword.sh test run independently

2014-04-02T15:12:45+00:00

Change-Id: I8f3cdfc2c66800f9a1e11aec4f25a42752b6b205
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

samba-tool: make provision check for bind version

2014-03-09T01:52:49+00:00

(small corrections and TODO added following Jelmer's review by abartlet)
Signed-off-by: Garming Sam 

Change-Id: Iba9a709641dad9f2ae05df0b26ac4cd2ebfc84f0
Reviewed-by: Andrew Bartlett 
Reviewed-by: Jelmer Vernooij 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Sun Mar  9 02:52:50 CET 2014 on sn-devel-104

samba-tool domain join subdomain: Rework sambadns.py to allow setup of DomainDNSZone only

2013-10-11T08:27:49+00:00

This skips handling the ForestDNSZone when we are setting up a subdomain.

Andrew Bartlett

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Fri Oct 11 10:27:49 CEST 2013 on sn-devel-104

provision: Remove --username and --password options from samba-tool domain provision

2013-10-11T06:32:10+00:00

This avoids confusion, because the LDAP backend does not use these,
and they do not set the password for the administrator account either!

This may break support for the 'existing' backend LDAP backend, but
that is nothing more than a stub for future development anyway, and
new work in this area should use EXTERNAL in any case.

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher